Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File:                     oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier:          r+sUzdZbnHSfvI0zrI03335r8y1eS01CUmeEx43eZ/8=
Subject key identifier:   07:14:9A:9B:B2:A1:E3:38:4E:0F:A5:3D:55:64:E2:4A:63:D7:AF:E0
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer:       /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial:       04EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number:          04E1
Signing time:             Fri 30 May 2025 23:58:25 +0000
Manifest this update:     Fri 30 May 2025 23:58:25 +0000
Manifest next update:     Fri 06 Jun 2025 23:58:25 +0000
Files and hashes:         1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: iqtdAaP1zZnFMuQjbWRcYMQDmhadQ2yuWIiIHq2XeoY=)
                          2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: Uv/DIuVOqvX05vXkqfaNSYJYxyqVmNJFQQZ426t0Ang=)
                          3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: X2R7fBr7byP7M3KR3cBhw+xawX2t49iSaQy5emSoxD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
                          rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
        Validity
            Not Before: May 30 23:58:25 2025 GMT
            Not After : Jun  6 23:58:25 2025 GMT
        Subject: CN=683a4621-7cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:1e:be:cd:15:c9:a7:0a:00:c7:d8:a7:7e:
                    fa:ff:61:25:4f:8e:54:dc:0a:ec:33:18:12:23:ae:
                    04:8b:80:e2:08:45:8c:ff:32:1c:d0:f8:8b:e0:b5:
                    be:3c:8b:d2:1e:30:25:62:c4:58:53:10:14:7b:d0:
                    5a:72:c8:8c:78:27:5e:e4:fa:98:57:bc:e1:58:75:
                    47:1f:23:83:93:f9:e6:ce:88:8e:d7:fe:4e:83:4c:
                    cf:b3:9e:4e:f5:27:7f:d9:a8:fb:70:23:1c:8b:55:
                    90:17:83:0f:47:4e:8d:b9:19:a9:e6:05:54:25:28:
                    d8:35:b0:81:78:b6:a1:a7:2e:5e:2a:13:96:11:f4:
                    7c:59:fe:20:97:90:4e:7c:9f:45:e1:82:4a:d8:9d:
                    72:ff:00:0a:48:22:d6:80:66:09:9e:1f:f1:26:00:
                    f1:48:03:ec:7b:0c:8f:1f:52:20:85:94:53:df:da:
                    a5:a4:ef:5b:9c:c9:7c:24:53:a7:e9:56:bf:95:54:
                    1f:48:d0:97:34:e5:a4:d7:47:53:c1:8d:00:91:2f:
                    9d:49:3a:27:cc:82:9e:81:e9:b3:ba:f1:cd:a6:00:
                    51:f1:3b:ee:be:8b:c0:9a:1d:81:9b:8c:af:c7:0d:
                    1a:d4:d4:7e:d6:38:ec:7b:a4:90:32:69:0f:13:e6:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:14:9A:9B:B2:A1:E3:38:4E:0F:A5:3D:55:64:E2:4A:63:D7:AF:E0
            X509v3 Authority Key Identifier:
                keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:07:77:63:8e:79:bd:ad:75:2f:79:0a:62:43:69:3c:94:44:
         e5:58:39:ec:cf:54:fe:a9:cd:bc:1d:13:04:c7:ee:09:df:72:
         74:5f:70:48:47:31:02:b5:d9:97:da:86:96:51:0e:2f:9c:0f:
         7c:34:14:54:df:55:1e:76:6a:5a:fa:82:87:ea:f0:bd:ce:a9:
         0c:55:58:a3:59:7d:a7:66:19:7c:f0:f9:73:de:f5:db:b8:93:
         9a:f7:46:a2:ca:67:8c:79:cc:dd:5c:f8:ff:27:4f:df:6c:03:
         3d:b6:36:78:18:ce:ba:28:b1:32:15:87:94:78:8d:d1:d5:2a:
         c2:eb:a6:2e:18:a0:5b:71:b4:c9:94:94:33:a4:db:11:cc:9b:
         cc:86:4c:bd:e1:92:9d:46:9e:e5:76:a2:93:44:18:db:85:af:
         8d:8d:52:1f:a0:6d:9c:54:54:aa:77:a9:32:f2:56:c7:7e:d2:
         ac:6f:8d:32:f7:55:7a:85:cb:e2:7e:af:c9:a1:f1:7d:b8:39:
         1f:72:b0:42:6e:38:57:fd:a5:ab:92:2b:cb:dc:d9:3c:d5:6a:
         c3:37:20:ba:06:81:ec:de:aa:00:63:30:5e:10:65:b2:47:45:
         92:dd:11:5f:48:6f:a3:45:25:8a:8c:c7:01:38:c9:ea:b0:6c:
         e5:d1:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:11:28 2025 by rpki-client